-OxEdaN- Posted January 19, 2018 Report Posted January 19, 2018 (edited) Salutare. Am probleme pe un vps la schimbarea parolei. Am sesizat că a fost cineva pe server și mi-a lăsat niște "cadouri" cum ar fi un silent miner, un perl bot și nu am idee dacă și un sniffer/backdoor ceva. Într-un final am reușit să scap de miner și perlbot care erau vizibile dar a șters și fișierele lăsând unul singur din lib64/security și nu mai pot schimba parolele. Iar mai jos privind în log/secure fișierele lipsă!.. Aveți idee de unde pot recupera fișierele lipsă pentru aceea versiune? Spoiler Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_access.so): /lib64/security/pam_access.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_access.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_unix.so): /lib64/security/pam_unix.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_unix.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_localuser.so): /lib64/security/pam_localuser.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_localuser.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_succeed_if.so): /lib64/security/pam_succeed_if.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_succeed_if.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_permit.so): /lib64/security/pam_permit.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_permit.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_loginuid.so): /lib64/security/pam_loginuid.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_loginuid.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_keyinit.so): /lib64/security/pam_keyinit.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_keyinit.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_limits.so): /lib64/security/pam_limits.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_limits.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_env.so): /lib64/security/pam_env.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_env.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_deny.so): /lib64/security/pam_deny.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_deny.so Edited January 19, 2018 by -OxEdaN- Quote
-OxEdaN- Posted January 19, 2018 Author Report Posted January 19, 2018 5 minutes ago, ManutaDeAur said: apt-get install libpam-cracklib E CentOS... Am încercat și varianta yum -y install pam dar la sfârșit îmi dă fail când să instaleze și cracklib-ul.. Quote
gogusan Posted January 19, 2018 Report Posted January 19, 2018 (edited) /etc/shadow exista? daca nu exista creaza-l cu: http://man7.org/linux/man-pages/man8/pwconv.8.html si apoi incearca iar passwd Edited January 19, 2018 by gogusan Quote
-OxEdaN- Posted January 20, 2018 Author Report Posted January 20, 2018 Există și shadow, e la locul lui.. Quote
iulik Posted January 20, 2018 Report Posted January 20, 2018 (edited) Dai yum list *pam* rpm -qa *pam* si spune-mi ce iti returneaza p.s: ce versiune de centos e? un yum update ar trebui sa-ti rezolve problemele daca e centos 6.8 Edited January 20, 2018 by ManutaDeAur Quote
-OxEdaN- Posted January 20, 2018 Author Report Posted January 20, 2018 Versiunea și kernelu sunt în poză. Am dat update urmat de upgrade și nimic. Quote